3Com S7902E Command Reference Manual - page 1874
1-8
Related commands:
display port-security
,
display port-security mac-address block
,
port-security
timer disableport
.
Examples
# Configure port GigabitEthernet 2/0/1 to block the source MAC addresses of illegal frames after
intrusion protection is triggered.
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] port-security intrusion-mode blockmac
port-security mac-address security
Syntax
In Ethernet port view:
port-security mac-address security mac-address vlan vlan-id
In system view:
port-security
mac-address
security
mac-address
interface interface-type interface-number
vlan
vlan-id
undo port-security mac-address security
[ [
mac-address
[
interface interface-type
interface-number
] ]
vlan vlan-id
]
View
Ethernet port view, system view
Default Level
2: System level
Parameters
mac-address
: Secure MAC address, in the H-H-H format.
interface interface-type interface-number
: Specifies a Layer 2 Ethernet port by its type and number.
vlan-id
: ID of the VLAN to which the secure MAC address belongs, in the range 1 to 4094.
Description
Use the
port-security mac-address security
command to add a secure MAC address.
Use the
undo port-security mac-address security
command to remove specified secure MAC
addresses.
By default, no secure MAC address is configured.
Note that:
z
The port must belong to the specified VLAN.
z
You can configure a secure MAC address only if port security is enabled and the specified port
operates in autoLearn mode.
z
The
undo port-security mac-address security
command can be used in system view only.
Related commands:
display port-security
.